ID CVE-2000-0816
Summary Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.
References
Vulnerable Configurations
  • cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*
    cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*
  • cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*
    cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*
  • cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*
    cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*
  • cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 10-10-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:N/I:P/A:N
redhat via4
advisories
rhsa
id RHSA-2000:080
refmap via4
bid 1785
iss 20001006 Insecure call of external programs in Red Hat Linux tmpwatch
mandrake MDKSA-2000:056
xf linux-tmpwatch-fuser(5320)
Last major update 10-10-2017 - 01:29
Published 06-10-2000 - 04:00
Last modified 10-10-2017 - 01:29
Back to Top